On-Chain Governance

What Is On-Chain Governance?

On-chain governance is a system where changes to a blockchain protocol are proposed, debated, voted on, and executed entirely through on-chain transactions. Rather than relying on informal discussions, core developer teams, or off-chain coordination to implement upgrades, the governance rules themselves are embedded in the protocol's smart contracts. When a proposal passes its voting threshold, the resulting code changes execute automatically.

This model emerged as a response to the governance challenges faced by early blockchains. Bitcoin's contentious block size debates of 2015-2017 demonstrated how off-chain governance could lead to prolonged stalemates and chain splits. Tezos launched in 2018 as the first major blockchain designed from the ground up with formal on-chain governance, and the approach has since been adopted by hundreds of DeFi protocols and DAOs.

How It Works

On-chain governance follows a structured lifecycle. While implementations vary, most systems share a common flow: proposal submission, a voting period, and automated execution.

Proposal Submission

Anyone holding a sufficient number of governance tokens can submit a proposal. Protocols set minimum thresholds to prevent spam: Compound requires 25,000 COMP (roughly 0.25% of total supply), while Uniswap requires 2.5 million UNI. Some protocols accept a refundable deposit instead of a fixed token threshold, returning the deposit if the proposal reaches quorum.

Proposals typically contain both a human-readable description and executable code. The code specifies exactly which contract functions to call and with what parameters, removing ambiguity about what will change if the vote passes.

Voting Period

Once submitted, proposals enter a voting window during which token holders cast their votes on-chain. The most common model is token-weighted voting: one token equals one vote. Key parameters include:

• Voting duration: typically 3-7 days (Compound uses approximately 2.5 days; Polkadot referenda can extend to 28 days)
• Quorum: the minimum participation required for a vote to be valid (Compound requires 400,000 COMP, roughly 4% of supply; Uniswap requires 40 million UNI)
• Approval threshold: the percentage of yes votes needed to pass (simple majority for most DeFi protocols; Tezos requires an 80% supermajority)

Votes are recorded as blockchain transactions, making them publicly auditable and permanently attributable to specific addresses.

Timelock and Execution

Approved proposals do not execute immediately. Most governance systems include a timelock period (Compound uses a 2-day timelock) that serves as a safety window. During this period, users who disagree with the outcome can exit the protocol before the changes take effect.

After the timelock expires, anyone can trigger execution by calling the timelock contract. The proposal's code runs automatically, modifying protocol parameters, upgrading contracts, or transferring treasury funds exactly as specified.

// Simplified on-chain governance lifecycle
// 1. Submit proposal (requires minimum token balance)
governor.propose(targets, values, calldatas, description)

// 2. Token holders vote during voting period
governor.castVote(proposalId, support)  // support: 0=against, 1=for, 2=abstain

// 3. After voting passes, queue for timelock
governor.queue(proposalId)

// 4. After timelock delay, execute
governor.execute(proposalId)  // calls the target contracts automatically

Governance Models in Practice

Tezos: Self-Amending Blockchain

Tezos pioneered formal on-chain governance with its self-amendment process. Protocol upgrades follow a five-period cycle: Proposal (bakers submit and vote on upgrade candidates), Exploration (an 80% supermajority vote to test the proposal), Cooldown (a testing window), Promotion (a final 80% supermajority vote), and Adoption (the upgrade activates). Each period lasts approximately two weeks, making the full cycle roughly 2.5 months. Tezos has successfully completed over 15 protocol upgrades through this process, from Athens through Paris, without a single contentious hard fork.

Polkadot: OpenGov and Conviction Voting

Polkadot replaced its original Council-based governance with OpenGov (Gov2) in June 2023. Under OpenGov, all decisions flow through public referenda organized into different "tracks" based on the scope of the proposed change. The system introduces conviction voting: token holders can multiply their voting power (up to 6x) by locking tokens for longer periods, ranging from no lock (1x) to 896 days (6x). Delegation is built in, allowing users to assign their votes to different delegates on a per-track basis.

Compound: The Governor Standard

Compound's Governor Alpha and Governor Bravo contracts became the de facto standard for DeFi governance. The pattern, widely adopted via OpenZeppelin's Governor contracts, has been forked by hundreds of protocols. Compound's flow follows a clear pipeline: a proposer submits with at least 25,000 COMP, a 2-day review period follows, then a 2.5-day voting period with a 400,000 COMP quorum, and finally a 2-day timelock before execution. This pattern directly governs interest rate models, collateral factors, and supported assets for billions of dollars in lending protocol deposits.

MakerDAO: Continuous Approval Voting

MakerDAO uses a unique continuous approval voting model for its executive votes. Rather than discrete voting periods, the proposal with the most MKR staked becomes the active governance state. This controls critical parameters for the DAI stablecoin: stability fees, collateral ratios, debt ceilings, and approved collateral types. MakerDAO also uses off-chain governance polls for signaling before committing to on-chain executive votes.

Delegation and Liquid Democracy

Most token holders lack the time or expertise to evaluate every technical proposal. Delegation addresses this by allowing holders to assign their voting power to a delegate who votes on their behalf. Compound, Uniswap, and Polkadot all support on-chain delegation, and a growing ecosystem of professional delegates has emerged: organizations that accept delegated votes and engage in governance full-time.

Liquid democracy extends this concept further. Unlike traditional representative democracy, liquid democracy allows holders to delegate their votes on a per-topic basis, reclaim their voting power at any time, and even delegate to different experts for different proposal categories. Polkadot's OpenGov implements this with per-track delegation.

The vote-escrow model pioneered by Curve Finance adds another dimension. Users lock governance tokens for extended periods (up to four years for veCRV) to receive amplified voting power and protocol fee revenue. Longer locks equal greater influence, aligning long-term incentives and reducing the risk of short-term speculative governance.

On-Chain vs. Off-Chain Governance

Bitcoin represents the opposite end of the governance spectrum. Rather than binding on-chain votes, Bitcoin uses off-chain rough consensus among developers, miners, and node operators. Changes are proposed through Bitcoin Improvement Proposals (BIPs), debated publicly, and implemented only when nodes voluntarily adopt new software. Miner signaling (used during the SegWit activation via BIPs 141, 148, and 91) can indicate support but is not binding.

Bitcoin's approach prioritizes stability and censorship resistance over rapid iteration. For a protocol securing hundreds of billions of dollars as a store of value, this conservatism is a feature. Protocols that need to iterate on parameters quickly, such as DeFi lending markets adjusting collateral ratios, benefit more from on-chain governance's speed and bindingness.

Use Cases

• Protocol parameter updates: adjusting interest rates, fee structures, collateral ratios, and emission schedules without requiring manual intervention from a core team
• Treasury management: DAO treasuries use on-chain governance to allocate funding to grants, development teams, liquidity incentives, and ecosystem growth initiatives
• Smart contract upgrades: approving and executing upgrades to protocol logic through proxy contract pattern changes, with timelocks providing exit windows
• Emergency actions: some protocols maintain guardian or multisig roles that can pause operations during exploits, with governance votes ratifying or reversing those actions afterward
• Gauge voting and incentive direction: governance token holders vote to allocate protocol emissions across liquidity pools, creating markets for yield allocation

Risks and Considerations

Plutocratic Dynamics

Token-weighted voting means wealth equals influence. Venture capital firms, protocol founders, and exchanges often hold enough tokens to dominate votes, concentrating power in ways that contradict decentralization goals. A single entity holding 5-10% of token supply can effectively control governance when participation rates are low.

Voter Apathy

Participation in on-chain governance is consistently low. Typical turnout ranges from 5-15% of eligible tokens. Many proposals on protocols like Uniswap struggle to reach quorum. The causes compound: gas costs for voting on Ethereum mainnet, the complexity of evaluating technical proposals, and the rational apathy of small holders whose individual votes carry negligible weight.

Governance Attacks

On-chain governance creates a structured attack surface. In April 2022, an attacker used approximately $1 billion in flash loans to acquire enough Beanstalk governance tokens to pass a malicious proposal, draining roughly $182 million from the protocol. Build Finance DAO suffered a similar attack in February 2022 when an attacker accumulated enough tokens to grant themselves minting authority. In May 2023, an attacker submitted a proposal to Tornado Cash governance containing hidden malicious code that created fake voting tokens, seizing control of the protocol. These incidents highlight how governance attacks exploit the very mechanism designed to decentralize control.

Slow Emergency Response

Multi-day voting periods and timelocks provide security during normal operations but become liabilities during emergencies. When a protocol is under active exploit, waiting days for a governance vote to authorize a fix is not viable. Most protocols work around this with multisig-based emergency roles that can pause contracts, but these guardian mechanisms themselves represent centralization tradeoffs.

Governance Minimization

A growing trend in protocol design is governance minimization: reducing the number of governable parameters to shrink the attack surface. Rather than expanding what governance can control, mature protocols progressively remove parameters from governance scope, hardcoding values that have been validated over time. This philosophy recognizes that every governable parameter is a potential vector for governance attacks or misaligned incentives.

Why It Matters

On-chain governance determines how billions of dollars in DeFi protocols evolve. Understanding its mechanics is essential for anyone holding governance tokens, participating in DAOs, or evaluating protocol risk. The design choices a protocol makes about governance, such as quorum thresholds, timelock durations, and delegation models, directly affect its security, decentralization, and ability to adapt.

For Bitcoin-based systems like Spark, which inherit Bitcoin's off-chain governance philosophy at the base layer, on-chain governance remains relevant in the broader ecosystem context. As stablecoins and DeFi protocols bridge into Bitcoin's Layer 2 networks, understanding how those protocols govern themselves helps users evaluate the trust assumptions involved. For a deeper exploration of how different blockchain architectures handle upgrades and governance, see the research on Bitcoin's core governance model.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.